Privacy Policy

1 Scope and clinical provider

CallMed USA (“we,” “our,” or “us”) operates callmedusa.com, connects patients with clinical providers, and collects patient payments. This Policy explains how we handle information in connection with our website, accounts, memberships, consultation access, payments, and support services.

Brazilian Clinic LLC is currently our only participating clinical provider. Its licensed clinicians deliver care through its clinical systems. CallMed USA does not perform medical consultations. Services are currently limited to patients physically located in Florida and to routine primary care consultations and annual check-up scheduling. We do not offer urgent or emergency care. In an emergency, call 911.

Brazilian Clinic maintains patient clinical records in its NextGen EHR and uses Doxy for telehealth. It is responsible for its own clinical information practices and required privacy notices and consents. This Policy describes CallMed USA's practices and does not replace Brazilian Clinic's HIPAA Notice of Privacy Practices or clinical consents.

2 Information we collect

Account and eligibility information may include your name, email, telephone number, mailing or billing address, date of birth or age, preferred language, account identifiers, login credentials, and information about dependents or your authority to act for them.

Service information may include your selected membership or consultation, enrollment and renewal dates, cancellation status, eligibility, scheduling details, and limited information indicating whether consultation access was requested or used. Identifiable healthcare-access information may itself be protected health information or consumer health data, even without a diagnosis.

Payment information may include amounts, dates, transaction identifiers, billing history, payment status, and limited payment-method details. Payment processors, including Stripe, process payment credentials. We do not intentionally store full payment card numbers when the processor collects them directly.

Website information may include IP addresses, device and browser details, session identifiers, pages viewed, access times, referring pages, and cookie identifiers. Support communications include the information you choose to send us.

3 Clinical information and HIPAA

Clinical intake, symptoms, diagnoses, treatment plans, prescriptions, test results, provider notes, and clinical communications are handled through Brazilian Clinic's clinical systems. We do not maintain a separate clinical chart as part of our ordinary administrative operations.

If you send clinical information to our support channel, we may receive it incidentally and use it only to address or appropriately route your request, or as otherwise permitted or required by law. Please direct treatment questions and clinical documents to Brazilian Clinic's patient channels.

We have a business associate agreement with Brazilian Clinic. To the extent we handle protected health information on its behalf, the applicable HIPAA requirements and that agreement control our use and disclosure. General permissions in this Policy do not expand the uses permitted under those requirements.

4 Sources and uses

We obtain information from you or your authorized representative, our website and account systems, Brazilian Clinic for service administration, and vendors supporting the requested services.

We use information to administer accounts and purchases; determine eligibility; arrange access and scheduling; process and reconcile payments; manage renewals, cancellations, and billing inquiries; provide support; communicate about services; authenticate users; prevent fraud and abuse; secure and improve our systems; maintain business records; and comply with legal obligations or establish, exercise, or defend legal rights.

We limit health-related processing to what applicable law and any required consent permit. We do not use identifiable healthcare-access information to infer diagnoses or create health-based advertising profiles.

5 Disclosures

We share identifying, contact, eligibility, and scheduling information with Brazilian Clinic as needed to arrange the care you request. Brazilian Clinic may provide limited administrative information about service use. It independently collects the information needed for diagnosis and treatment.

We use vendors for hosting, storage, payment processing, communications, support, security, fraud prevention, limited analytics, and professional services. Information is disclosed only as appropriate for those functions, subject to applicable contractual and legal restrictions. Payment processors may also process transaction data under their own notices and legal obligations.

We may disclose information in response to lawful process, for legally permitted safety or fraud-prevention purposes, or in a business transfer, subject to applicable law, existing privacy commitments, and any required consent.

6 Cookies and marketing

Cookies and similar technologies may support essential functionality, account security, preferences, fraud prevention, and limited website analytics. Browser settings may allow you to restrict cookies, although some functions may be affected. We honor legally required opt-out signals and obtain consent where required.

We do not sell personal information or consumer health data. We do not disclose identifiable healthcare-access information to advertising networks or data brokers for targeted or cross-context behavioral advertising. We do not deploy or authorize advertising trackers to collect clinical information through clinical systems.

We may send lawful promotional communications. You can unsubscribe using the mechanism in the message or contact us by email at contact@callmed.com or by WhatsApp at the number displayed on https://callmedusa.com/. This does not stop necessary account, billing, security, or service communications. Optional marketing consent is not a condition of accessing purchased services.

7 Retention and deidentification

We retain information for as long as reasonably necessary for the purposes described here, taking into account account activity, legal and accounting requirements, security, disputes, and applicable retention limits. Brazilian Clinic separately maintains clinical records under its own legal obligations.

When information is no longer needed, we delete or properly deidentify it, subject to lawful retention and backup requirements. We apply the standard required by the applicable law, maintain deidentified information in that form, and do not attempt reidentification except as legally permitted to assess deidentification effectiveness. Properly deidentified or aggregated information may be used for lawful operational analysis and service improvement.

8 Security

We maintain administrative, technical, and physical safeguards designed to protect information, and limit access to those who need it for authorized purposes. Where HIPAA applies, we comply with its applicable safeguards and our business associate obligations. No system can guarantee absolute security. We provide incident notifications when required by law.

9 Minors and external services

Accounts are intended to be created and managed by adults. We do not knowingly solicit information directly from children under 13 through the public website. If services are available to a minor, an authorized adult may provide the administrative information needed to arrange them. Clinical consent, confidentiality, and record-access rights remain subject to applicable law, including rights held by minors.

Brazilian Clinic and other affiliated providers may maintain their own privacy policies and practices for information they independently collect or control. This Policy does not describe or authorize those practices. Their policies do not expand CallMed USA's permission to use or disclose information or reduce our obligations for information we handle. Brazilian Clinic is currently our only participating clinical provider.

10 Privacy rights and requests

Depending on the applicable law and its coverage, you may have rights to confirm processing; access or obtain a copy of information; correct inaccuracies; request deletion; withdraw consent; opt out of covered sales, sharing, targeted advertising, or profiling; limit certain sensitive-data uses; obtain recipient information; and appeal a denied request. These rights are subject to applicable conditions and exceptions. We do not unlawfully discriminate against you for exercising them.

Submit a request by email at contact@callmed.com or by WhatsApp at the number displayed on https://callmedusa.com/ and identify it as a Privacy Request. You do not need to purchase a service or create an account solely to make a request. Provide enough information to identify your account and request, but do not send medical records or complete card numbers through a general support channel.

We may request information reasonably necessary to verify identity or authority. An authorized agent, parent, guardian, or other legally authorized person may act for you where permitted. We respond within the applicable legal deadline. If an appeal right applies, submit a Privacy Appeal through the same channel, identifying the original decision. We will provide legally required instructions for regulatory complaints.

For medical-record access, correction, or other clinical privacy requests, contact Brazilian Clinic through its patient platform. You may also contact us by email at contact@callmed.com or by WhatsApp at the number displayed on https://callmedusa.com/ for help routing a request concerning information we handle on its behalf.

11 Consumer health data

This Policy can be read independently. Our Consumer Health Data Privacy Policy provides additional detail about health-related administrative data, recipients, consent, and applicable rights. Our Refund and Cancellation Policy addresses purchases and renewals. Neither acceptance of these policies nor a purchase substitutes for legally required consent. Statutory rights depend on the applicable law's coverage and exemptions.

Where applicable, that policy controls over a conflicting general provision here concerning consumer health data. Neither policy expands authority to use protected health information under HIPAA.

12 Updates and contact

We may update this Policy as our services or practices change. We will revise the date and provide additional notice or obtain consent where required before a new use or disclosure begins. An update does not retroactively authorize processing that required consent.

For questions about CallMed USA's information practices, contact us by email at contact@callmed.com or by WhatsApp at the number displayed on https://callmedusa.com/. For care or clinical records, contact Brazilian Clinic through its patient channels.